Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries full responsibility for disclosing behavioral traits. While it indicates a destructive action ('delete') and recursive scope, it fails to mention irreversibility, permission requirements, or error states (e.g., folder not found, non-empty). This is minimal transparency for a mutation tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.